How about WHITELIST AUTH?  Then no tests will be enforced on users who authenticate with the server when sending.  That also deals with the common CMDSPACE problem Microsoft mail clients have, which is otherwise a very effective test.

Darin.
 
 
----- Original Message -----
From: Joe Wolf
Sent: Wednesday, December 01, 2004 11:50 AM
Subject: [Declude.JunkMail] Major Declude/SPF problem... any ideas?

I've been receiving reports of non-delivery of messages between users on our mail server.  For example if I host abc.com and users between abc.com send to each other inside the building on the private IP range.
 
I tracked down the problem and all the messages have SPF FAIL in the headers and some end up being held for wieght issues (short subjects, only an "OK" in the message, etc.).
 
The SPF is failing because the private IP range (192.168.1.XXX) is not listed in our SPF DNS records.  I don't know if it would be wise to put private IP ranges in the SPF DNS record.
 
Is there a way to skip SPF testing on internal messages... those that never hit a public IP?
 
Thanks,
Joe

Reply via email to